Abstract: A computer-implemented method of training a software agent for protecting a computer system comprises receiving performance monitoring counter (PMC) data, comprising data from one or more hardware performance monitoring counters (PMCs) of the computer system, and receiving an output from an anomaly detector that is arranged to detect anomalies in the computer system. State data, comprising at least the PMC data, is provided to the software agent which selects a security policy from a set of security policies in dependence upon the state data, and applies the selected security policy to the computer system. A reward function is evaluated to determine a reward value which depends on at least the output of the anomaly detector. The reward value is used to train the software agent using reinforcement learning for selecting security policies from the set of security policies.

Abstract: A system for generating at least one policy includes a static permission database containing a plurality of static permission records identifying access permissions for at least one credential holder to at least one resource, a policy database, and a processor to analyze the plurality of static permission records to generate the at least one policy, wherein an outcome of execution of the at least one policy corresponds to the plurality of static permission records.

Abstract: A method for controlling authorization decisions for resource access is provided. The method includes generating a request signal that includes resource identification information, transmitting the request signal for resource access to an authorization system, receiving the request signal at the authorization system, and generating an authorization request signal based on the request signal. The authorization request signal requires a single Boolean data type response in the form of either a grant access reply and a deny access reply.

Abstract: A system for generating at least one policy includes a static permission database containing a plurality of static permission records identifying access permissions for at least one credential holder to at least one resource, a policy database, and a processor to analyze the plurality of static permission records to generate the at least one policy, wherein an outcome of execution of the at least one policy corresponds to the plurality of static permission records.

Abstract: A system for auditing physical access to at least one resource includes a static permission database containing a plurality of static permission records identifying access permissions for at least one credential holder to the at least one resource, a policy database containing a plurality of policies, a processor to execute at least one policy of the plurality of policies to generate an outcome of execution of at least one policy to compare the outcome of execution of at least one policy with at least one appropriate static permission records of the plurality of static permission records, and a scheduler to trigger the processor to execute and compare the outcome of execution of at least one policy with the at least one appropriate static permission records in response to at least one of an occasional event, a schedule, or an action by administrator.